FIPS Considerations

The following are the FIPS considerations:

When you upgrade existing CA ITCM components, you cannot specify the FIPS mode; upgrades always force FIPS-preferred mode.
All the upgraded components use FIPS-preferred mode until you explicitly switch them to FIPS-only mode. You can switch to the FIPS-only mode when you have upgraded all the components in the CA ITCM infrastructure to the current release. For more information about switching the FIPS modes, see the Security Features section.
After upgrading the domain manager and the Image Prepare System (IPS), you can use IPS to upgrade existing OS and boot images to make them comply with the FIPS standards. You can then register and apply the migrated images to the boot servers. For more information about upgrading, registering, and applying the OS images, see the OS Installation Management Administration Guide.

More information: